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Digital circuits design: Cu rre nt mask generation: a transistor level security against 
DPA attacks 

Daniel Mesquita, Jean-Denis Techer, Lionel Torres, Gilles Sassatelli, Gaston Cambon, Michel 
Robert, Fernando Moraes 

September 2005 Proceedings of the 18th annual symposium on Integrated circuits 
and system design SBCCI '05 

Publisher: ACM Press 

Full text available: gj3df(5J3JB6 KB) Additional Information: full citation , abstract, references, index terms 

The physical implementation of cryptographic algorithms may leak to some attacker 
security information by the side channel data, as power consumption, timing, temperature 
or electromagnetic emanation. The Differential Power Analysis (DPA) is a powerful side 
channel attack, based only on the power consumption information. There are some 
countermeasures proposed at algorithmic or architectural level that are expensive and/or 
complexes. This paper addresses the DPA attack problem by a novel and eff ... 

Keywords: DPA, countermeasures, cryptography, side channel attacks 



2 DPA onjQuasj^^yJnsensitive Asyn chronous Circuits: Formaliz ation and 
Improvement 

G. F. Bouesse, M. Renaudin, S. Dumont, Fabien Germain 

March 2005 Proceedings of the conference on Design, Automation and Test in Europe 
- Volume 1 DATE '05 

Publisher: IEEE Computer Society 

Full text available: ^ pdf(5l5,19 KB) Additional Information: full citation, ab strac t, index terms 

The purpose of this paper is to formally specify a flow devoted to the design of Differential 
Power Analysis (DPA) resistant QDI asynchronous circuits. The paper first proposes a 
formal modeling of the electrical signature of QDI asynchronous circuits. The DPA is then 
applied to the formal model in order to identify the source of leakage of this type of 
circuits. Finally, a complete design flow is specified to minimize the information leakage. 
The relevancy and efficiency of the approach is demo ... 



3 Crypto blocks and security: Overcoming glitches and dissipation timing skews in 

& design of DPA-resistant cryptographic hardware 

^ Kuan Jen Lin, Shan Chien Fan, Shih Hsien Yang, Cheng Chia Lo 

April 2007 Proceedings of the conference on Design, automation and test in Europe 
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Publisher: ACM Press 

Full text available: *gj3df(30 4.2 1 KB) Additional Information: full citation, abstract, ref eren c es 

Cryptographic embedded systems are vulnerable to Differential Power Analysis (DPA) 
attacks. In this paper, we propose a logic design style, called as Precharge Masked Reed- 
Muller Logic (PMRML) to overcome the glitch and Dissipation Timing Skew (DTS) problems 
in design of DPA-resistant cryptographic hardware. Both problems can significantly reduce 
the DPA-resistance. To our knowledge, the DTS problem and its countermeasure have not 
been reported. The PMRML design can be fully realized using co ... 

Desjgn ^ again st the threat of p ow er-atta c ks i n DSP-embed ded g 

processors 

Catherine H. Gebotys 

February 2004 ACM Transactions on Embedded Computing Systems (TECS), volume 3 

Issue 1 
Publisher: ACM Press 

Full text available: ^ pdf(214.56 KB) Additional Information: full citation, abstract, references, citings, index 

terms 

Embedded wireless devices require secure high-performance cryptography in addition to 
low-cost and low-energy dissipation. This paper presents for the first time a design 
methodology for security on a VLIW complex DSP-embedded processor core. Elliptic curve 
cryptography is used to demonstrate the design for security methodology. Results are 
verified with real dynamic power measurements and show that compared to previous 
research a 79&percnt; improvement in performance is achieved. Modification o ... 

Keywords: VLIW 



5 Architectures for cryptography and secur ity applications: Simul at ion models for side- g| 

6 channel information leaks 
^ Kris Tiri, Ingrid Verbauwhede 

June 2005 Proceedings of the 42nd annual conference on Design automation DAC "05 
Publisher: ACM Press 

Full text available: 'g] pdf(2 44.28 KB) Additional Information: full citation,, a bst ract, re ferences , index terms 

Small, embedded integrated circuits (ICs) such as smart cards are vulnerable to so-called 
side-channel attacks (SCAs). The attacker can gain information by monitoring the power 
consumption, execution time, electromagnetic radiation and other information that is 
leaked by the switching behavior of digital CMOS gates. Ever since power attacks have 
been introduced in 1999, many countermeasures have been proposed. Often a significant 
increase in security has been touted. We will show that in order t ... 

Keywords: countermeasure, differential power analysis, encryption, security IC, side- 
channel attack, simulation model, smart card 



6 A Log ic Level Design Methodology for a Secure DPA Resistant ASIC or FPGA 
lrn|3lemenJation 
Kris Tiri, Ingrid Verbauwhede 

February 2004 Proceedings of the conference on Design, automation and test in 
Europe - Volume 1 DATE '04 

Publisher: IEEE Computer Society 

Full text available: Q.pdf(I43je KB) Additional Information: full citation, abstract, citings, Lndexjerms 
This paper describes a novel design methodology to implement a secure DPA resistant 
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crypto processor. The methodology is suitable for integration in a common automated 
standard cell ASIC or FPGA design flow. The technique combines standard building blocks 
to make new'compound standard cells, which have a close to constant power 
consumption. Experimental results indicate a 50 times reduction in the power consumption 
fluctuations. 



A splits for low-energy secure embedded systems 

Catherine H. Gebotys 

August 2006 ACM Transactions on Embedded Computing Systems (TECS), volume 5 issue 
Publisher: ACM Press 

Full text available: ^Mf(L62_MBJ Additional Information: f ull citation , abstract, r e fe renc es, i nde x terms 

Future wireless embedded devices will be increasingly powerful, supporting many more 
applications, including one of the most crucial— security. Although many embedded 
devices offer more resistance to bus— probing attacks because of their compact size, 
susceptibility to power or electromagnetic analysis attacks must be analyzed. This paper 
presents a new split-mask countermeasure to thwart low-order differential power analysis 
(DPA) and differential EM analysis (DEMA). For the first time, real- ... 

Keywords: EM analysis, Side channel analysis, countermeasures, power attacks 



8 Architectures for cryptography and security applications: A side-channel leakage free B 
coprocessor 1C in 0.18 pm CMOS fo r embedde d AES-based cryptographic and 
biometric processing 

K. f iri, 6. Hwang, A. Hodjat, B. Lai, S. Yang, P. Schaumont, I. Verbauwhede 

June 2005 Proceedings of the 42nd annual conference on Design automation DAC '05 

Publisher: ACM Press 

Full text available: fj[\ pdf(2 92 MB) Additional Information: full citation, abstract, references, citings, index 

" terms 

Security ICs are vulnerable to side-channel attacks (SCAs) that find the secret key by 
monitoring the power consumption and other information that is leaked by the switching 
behavior of digital CMOS gates. This paper describes a side-channel attack resistant 
coprocessor IC and its design techniques. The IC has been fabricated in 0.18|jm CMOS. 
The coprocessor, which is used for embedded cryptographic and biometric processing, 
consists of four components: an Advanced Encryption Standard (AES) ... 

Keywords: countermeasure, differential power analysis, encryption, security IC, side- 
channel attack, smart card 



9 Work-in-progress session on innovative topics: Security wrappers and g| 
§> for SoC technolo gies 
* C. H. Gebotys, Y. Zhang 

October 2003 Proceedings of the 1st IEEE/ACM/IFIP international conference on 
Hardware/ software codesign and system synthesis CODES+ISSS '03 

Publisher: ACM Press 

Full text available: fQ pdf(790 57 KB) Addltjonal Information: full citation, abstract, references, citings, index 
' " terms 

Future wireless internet enabled devices will be increasingly powerful supporting many 
more applications including one of the most crucial, security. Although SoCs offer more 
resistance to bus probing attacks, power/EM attacks on cores and network snooping 
attacks by malicious code are relevant. This paper presents a methodology for security on 
NoC at both the network level (or transport layer) and at the core level (or application 
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layer) is proposed. For the first time a low cost security wrapp ... 
Keywords: VLIW, adiabatic, design, performance, security 



Poster: A secure fingerprint matchin g technique 
Shenglin Yang, Ingrid M. Verbauwhede 

November 2003 Proceedings of the 2003 ACM SIGMM workshop on Biometrics 
methods and applications WBMA '03 

Publisher: ACM Press 

Full text available: ^ pdf(452.10 KB) Additional Information: full citation, abstract, references, citings, index 

terms 

In this paper, we propose a novel robust secure fingerprint matching technique, which is 
secure against side channel attacks. An algorithm based on the local structure of the 
minutiae is presented to match the fingerprints. The main contribution is the careful 
division of the fingerprint recognition system into two parts: a secure part and a non- 
secure part. Only the relative small secure part, which contains sensitive biometric 
template information, requires realization in specialized DPA-proof ... 

Keywords: DPA-proof, embedded system, fingerprint recognition, secure matching 




1 1 Reliability and security: Java cryptography on KVM and its performance and security Q 

optimi zatio n usin g HW/SW co-desi an techniques 

Yusuke Matsuoka, Patrick Schaumont, Kris Tiri, Ingrid Verbauwhede 

September 2004 Proceedings of the 2004 international conference on Compilers, 

architecture, and synthesis for embedded systems CASES '04 
Publisher: ACM Press 

Full text available: ff!| pdf(1 88.08 KB) Additional Information: full citation, abstract, references, citings, index 

terms 

This paper describes a design approach to include and optimize Java based cryptographic 
applications into resource limited embedded devices. For easy prototyping and to be 
platform independent, the security applications are first developed in Java. Two Java 
cryptographic libraries, the Bouncy Castle API and the IAIK API are ported to a real 
embedded device for cost and performance evaluation. It requires 0.88Mbytes to 
1.2Mbytes in the KVM footprint size and a few milliseconds to run secret key al ... 

Keywords: cryptography, design, embedded systems, java, security 



A VLSI Design Flow for Secure Sid e-C h a nnel Attack Resistant ICs 
Kris Tiri, Ingrid Verbauwhede 

March 2005 Proceedings of the conference on Design, Automation and Test in Europe 
- Volume 3 DATE '05 

Publisher: IEEE Computer Society 

Full text available: «g pdf(289.79 KB) Additional Information: full citation, abstract, index terms 

This paper presents a digital VLSI design flow to create secure, side-channel attack (SCA) 
resistant integrated circuits. The design flow starts from a normal design in a hardware 
description language such as VHDL or Verilog and provides a direct path to a SCA resistant 
layout. Instead of a full custom layout or an iterative design process with extensive 
simulations, a few key modifications are incorporated in a regular synchronous CMOS 
standard cell design flow. We discuss the basis for side-ch ... 

Power Attack Resistant Cryptosystem Design: A Dynamic Voltage and Frequency 
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Switching Approach 

Shengqi Yang, Wayne Wolf, N. Vijaykrishnan, D. N. Serpanos, Yuan Xie 

March 2005 Proceedings of the conference on Design, Automation and Test in Europe 

- Volume 3 DATE '05 

Publisher: IEEE Computer Society 

Full text available: ^.pdf(2MJ.lKB) Additional Information: full ci tatio n, abstract, index terms 

A novel power attack resistant cryptosystem is presented in this paper. Security in digital 
computing and communication is becoming increasingly important. Design techniques that 
can protect cryptosystems from leaking information have been studied by several groups. 
Power attacks, which infer program behavior from observing power supply current into a 
processor core, are important forms of attacks. Various methods have been proposed to 
countermeasure the popular and efficient power attacks. Howe ... 

14 Maskin g the Ener g y Behavior of PES Encryption 

H. Saputra, N. Vijaykrishnan, M. Kandemir, M. J. Irwin, R. Brooks, S. Kim, W. Zhang 

March 2003 Proceedings of the conference on Design, Automation and Test in Europe 

- Volume 1 DATE 03 

Publisher: IEEE Computer Society 
Full text available: S pdf(264.41 KB) 

lljjf Additional Information: full citation , abstract, citings, Index terms 

w Publisher Site 

Smart cards are vulnerable to both invasive and non-invasive attacks. Specifically, non- 
invasive attacks using power and timing measurements to extract the cryptographic key 
has drawn a lot of negative publicity for smart card usage. The power measurement 
techniques rely on the data-dependent energy behavior of the underlying system. Further, 
power analysis can be used to identify the specific portions of the program being executed 
to induce timing glitches that may in turn help to bypass key ch ... 

15 NeMechn^ reliability enhancement in e mbedded s ystem s: | 

A CyjTenjfl^ m s oftware and hardware for securi ty applications 

Radu Muresan, Catherine Gebotys 

September 2004 Proceedings of the 2nd IEEE/ACM/IFIP international conference on 
Hardware/software codesign and system synthesis CODES+ISSS '04 

Publisher: ACM Press 

Full text available: p.df(344^68 KB ) Additional Information: full citation, abstract, refer en c e s, index terms 

This paper presents a new current flattening technique applicable in software and 
hardware. This technique is important in embedded cryptosystems since power analysis 
attacks (that make use of the current variation dependency on data and program) 
compromise the security of the system. The technique flattens the current internally by 
exploiting current consumption differences at the instruction level. Code transformations 
supporting current variation reductions due to program dependencies are pre ... 

Keywords: current flattening, hardware architecture, power analysis attacks 



Uniformly-Switching Log ic for Crypto graphi c Hardware 
Igor L. Markov, Dmitri Maslov 

March 2005 Proceedings of the conference on Design, Automation and Test in Europe 
- Volume 1 DATE '05 

Publisher: IEEE Computer Society 

Full text available: l g[ pdf(118.5Q KB) Additional Information: full citatio n, abstract, ind ex terms 

Recent work on Differential Power Analysis shows that even mathematically-secure 
cryptographic protocols may be vulnerable at the physical implementation level. By 
measuring energy consumed by a working digital circuit, one can glean enough 
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information to break encryption. Thwarting such attacks requires a new approach to logic 
and physical design. In this work, we seek to equalize switching activity of a circuit over all 
possible inputs and input transitions by adding redundant gates and increa ... 

17 High S ecurit y Sm artc ards 

M. Renaudin, F. Bouesse, Ph. Proust, J. P. Tual, L. Sourgen, F. Germain 

February 2004 Proceedings of the conference on Design, automation and test in 

Europe - Volume 1 DATE '04 
Publisher: IEEE Computer Society 

Full text available: ^pM§Ml KB) Additional Information: full citat i o n, abstr a ct , citings, index terms 

New consumer appliances such as PDA, Set Top Box, GSM/UMTS terminals enable an easy 
access to the internet and strongly contribute to the development of e-commerce and m- 
commerce services. Tens of billion payments are made using cards today, and this is 
expected to grow in a near future. Smartcard platforms will enable operators and service 
providers to design and deploy new e- and m-commerce services. This development can 
onlybe achieved if a high level of security is guaranteed for the transac ... 

18 Secunty as a ngwjjmgns^ in emb edded system de s i g n Securit y as a new 

<||> dimension i n e mbedded system design 

Srivaths Ravi, Paul Kocher, Ruby Lee, Gary McGraw, Anand Raghunathan 

June 2004 Proceedings of the 41st annual conference on Design automation DAC '04 

Publisher: ACM Press 

Full text available: Q pdf(209. 1 0 KB) Add ! tional Information: full citation, abstract, references, citings, index 

terms 

The growing number of instances of breaches in information security in the last few years 
has created a compelling case for efforts towards secure electronic systems. Embedded 
systems, which will be ubiquitously used to capture, store, manipulate, and access data of 
a sensitive nature, pose several unique and interesting security challenges. Security has 
been the subject of intensive research in the areas of cryptography, computing, and 
networking. However, despite these efforts, security is ... 

Keywords: PDAs, architectures, battery life, cryptography, design, design methodologies, 
digital rights management, embedded systems, performance, security, security 
processing, security protocols, sensors, software attacks, tamper resistance, trusted 
computing, viruses 



Srivaths Ravi, Anand Raghunathan, Paul Kocher, SlunirHattangady 

August 2004 ACM Transactions on Embedded Computing Systems (TECS), volume 3 issue 
Publisher: ACM Press 

Full text available: Q pdf(3.67 MB ) Additional Information: f ull citation , abstract, refere nces, citings, index 

terms , review 

Many modern electronic systems— including personal computers, PDAs, cell phones, 
network routers, smart cards, and networked sensors to name a few— need to access, 
store, manipulate, or communicate sensitive information, making security a serious 
concern in their design. Embedded systems, which account for a wide range of products 
from the electronics, semiconductor, telecommunications, and networking industries, face 
some of the most demanding security concerns— on the one hand, they are oft ... 

Keywords: Embedded systems, architecture, authentication, battery life, cryptographic 
algorithms, decryption, encryption, hardware design, processing requirements, security, 
security attacks, security protocols, tamper resistance 
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20 Device, i nterconnect, and power optimiza ti on for nano-CMQS : An alysis of d ata 
<g> dependence of leakage current in CMOS cryptographic hardware 
Jacopo Giorgetti, Giuseppe Scotti, Andrea Simonetti, Alessandro Trifiletti 
March 2007 Proceedings of the 17th great lakes symposium on Great lakes 

symposium on VLSI GLSVLSI '07 
Publisher: ACM Press 

Full text available: <g pdf(1 .01 MB) Additional Information: full citation, abstract, references, index terms 

A novel power analysis technique for CMOS cryptographic hardware based on leakage 
power consumption measurements is presented. Algorithms and models to predict the 
input vector for maximum and minimum leakage currentallin CMOS gates are reviewed. 
Extensive transistor level simulations on a simple CMOS crypto core are presented. 
Leakage current measurements carried out on an ASIC for cryptographic applications 
implemented in a 0.13 urn CMOS technology are reported. The results of this work show 
th ... 

Keywords: cryptographic hardware, leakage power consumption, side channel analysis 
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1 Qesjgnj)^ aga ins t th e threat of power-attacks in DSP-em bedded 

processors 
Catherine H. Gebotys 

February 2004 ACM Transactions on Embedded Computing Systems (TECS), volume 3 

Issue 1 
Publisher: ACM Press 
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Full text available ^M.(2MM..M) Additional Information: full citation , a bstr act, references, index terms 

Small, embedded integrated circuits (ICs) such as smart cards are vulnerable to so-called 
side-channel attacks (SCAs). The attacker can gain information by monitoring the power 
consumption, execution time, electromagnetic radiation and other information that is 
leaked by the switching behavior of digital CMOS gates. Ever since power attacks have 
been introduced in 1999, many countermeasures have been proposed. Often a significant 
increase in security has been touted. We will show that in order t ... 

Keywords: countermeasure, differential power analysis, encryption, security IC, side- 
channel attack, simulation model, smart card 



4 Design analysis techniques: Energy-aware design techniques for differential power 
^ analysis protection 

Luca Benini, Alberto Macii, Enrico Macii, Elvira Omerbegovic, Fabrizio Pro, Massimo Poncino 
June 2003 Proceedings of the 40th conference on Design automation DAC '03 
Publisher: ACM Press 

Full text available: ^ pdf (286.4 1 KB) Additional Information: full citation, abstract, references, citings, index 
*~ terms 

Differential power analysis is a very effective cryptanalysis technique that extracts 
information on secret keys by monitoring instantaneous power consumption of 
cryptoprocessors. To protect against differential power analysis, power supply noise is 
added in cryptographic computations, at the price of an increase in power consumption. 
We present a novel technique, based on well-known power-reducing transformations 
coupled with randomized clock gating, that introduces a significant amount of sera ... 

Keywords: differential power analysis, low-power design 



5 A Logic Level Design Methodolo g y for a Secure DPA Resistant ASIC or FPGA 
Implementation 
Kris Tiri, Ingrid Verbauwhede 

February 2004 Proceedings of the conference on Design, automation and test in 
Europe - Volume 1 DATE , 04 

Publisher: IEEE Computer Society 

Full text available: pdf(143,96 KB) Additional Information: full citation, abstract, citings, index terms 

This paper describes a novel design methodology to implement a secure DPA resistant 
crypto processor. The methodology is suitable for integration in a common automated 
standard cell ASIC or FPGA design flow. The technique combines standard building blocks 
to make new'compound standard cells, which have a close to constant power 
consumption. Experimental results indicate a 50 times reduction in the power consumption 
fluctuations. 



A VLSI Design Flow foLSecure SidezChannel Attack Resistant ICs 
Kris Tiri, Ingrid Verbauwhede 

March 2005 Proceedings of the conference on Design, Automation and Test in Europe 
- Volume 3 DATE '05 

Publisher: IEEE Computer Society 

Full text available: ^.edf(28LZ9.KB) Additional Information: fuJLcitatLon, abstract, index terms 

This paper presents a digital VLSI design flow to create secure, side-channel attack (SCA) 
resistant integrated circuits. The design flow starts from a normal design in a hardware 
description language such as VHDL or Verilog and provides a direct path to a SCA resistant 
layout. Instead of a full custom layout or an iterative design process with extensive 
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simulations, a few key modifications are incorporated in a regular synchronous CMOS 
standard cell design flow. We discuss the basis for side-ch ... 

High Security Smartcards 

M. Renaudin, F. Bouesse, Ph. Proust, J. P. Tual, L. Sourgen, F. Germain 
February 2004 Proceedings of the conference on Design, automation and test in 
Europe - Volume 1 DATE '04 

Publisher: IEEE Computer Society 

Full text available: ^pdf(86„,43.KB) Additional Information: full citation, abstract, citings, index Jerms 

New consumer appliances such as PDA, Set Top Box, GSM/UMTS terminals enable an easy 
access to the internet and strongly contribute to the development of e-commerce and m- 
commerce services. Tens of billion payments are made using cards today, and this is 
expected to grow in a near future. Smartcard platforms will enable operators and service 
providers to design and deploy new e- and m-commerce services. This development can 
onlybe achieved if a high level of security is guaranteed for the transac ... 

Securit\£as ^jiew di mension in e mbedded s yste m d esig n S finurity_gg a new 
dimension in embedded system design 

Srivaths Ravi, Paul Kocher, Ruby Lee, Gary McGraw, Anand Raghunathan 
June 2004 Proceedings of the 41st annual conference on Design automation DAC 04 
Publisher: ACM Press 

Full text available: ^.,pdf(209.10 KB) Addjtlonal Information: fullcitation, abstract, references, citings, index 

terms 

The growing number of instances of breaches in information security in the last few years 
has created a compelling case for efforts towards secure electronic systems. Embedded 
systems, which will be ubiquitously used to capture, store, manipulate, and access data of 
a sensitive nature, pose several unique and interesting security challenges. Security has 
been the subject of intensive research in the areas of cryptography, computing, and 
networking. However, despite these efforts, security is ... 

Keywords: PDAs, architectures, battery life, cryptography, design, design methodologies, 
digital rights management, embedded systems, performance, security, security 
processing, security protocols, sensors, software attacks, tamper resistance, trusted 
computing, viruses 

9 Practical [exp eriences: Security-driven explorat i on of crypto g ra ph y in DSP cores I 
" Catherine H. Gebotys 

October 2002 Proceedings of the 15th international symposium on System Synthesis 

ISSS 02 
Publisher: ACM Press 

Full text available: fgjdfll.CM MB) Additional Information: full citation , abstract , references , index terms 

With the popularity of wireless communication devices a new important dimension of 
embedded systems design has arisen, that of security. This paper presents for the first 
time design exploration for secure implementation of cryptographic applications on a 
complex DSP processor core. A new metric for security, the implementation security index, 
is introduced for measuring resistance to power attacks. Elliptic curve cryptographic 
algorithms are used to demonstrate and quantize security, energy, pe ... 

Keywords: DSP, low energy, methodology, power analysis attack 

10 Security on FPGAs: State-of-the-art imp lemen t atio ns and attacks \ 
Thomas Wollinger, Jorge Guajardo, Christof Paar 
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August 2004 ACM Transactions on Embedded Computing Systems (TECS), volume 3 issue 
Publisher: ACM Press 

Full text available: f^j3df(296.79 KB) Additional Information: full citation, abstra ct, references, ind ex terms 

In the last decade, it has become apparent that embedded systems are Integral parts of 
our every day lives. The wireless nature of many embedded applications as well as their 
omnipresence has made the need for security and privacy preserving mechanisms 
particularly important. Thus, as field programmable gate arrays (FPGAs) become integral 
parts of embedded systems, it is imperative to consider their security as a whole. This 
contribution provides a state-of-the-art description of security issues ... 

Keywords: Cryptography, FPGA, attacks, cryptographic applications, reconfigurable 
hardware, reverse engineering, security 



11 Power modeling and optimization for embedded systems: Energy-efficient data |~J 
" scrambling on memory- processor interf aces ~ 

Luca Benini, Angelo Galati, Alberto Macii, Enrico Macii, Massimo Poncino 
August 2003 Proceedings of the 2003 international symposium on Low power 

electronics and design ISLPED '03 
Publisher: ACM Press 

Full text available: l fi.Bdfi147.39 KB) Additional Information: full citation, abstract, references, index terms 

Crypto-processors are prone to security attacks based on the observation of their power 
consumption profile. We propose new techniques for increasing the non-determinism of 
such profile, which rely on the idea of introducing randomness in the bus data transfers. 
This is achieved by combining data scrambling with energy-efficient bus encoding, thus 
providing high information protection at no energy cost. Results on a set of bus traces 
originated by real-life applications demonstrate the applicabil ... 

Keywords: bus encoding, data scrambling, power attacks 

12 U RPR— An extension of U RCR for software ejpgllning [HI 
B. Su, S. Ding, J. Xia 

December 1986 ACM SIGMICRO Newsletter , Proceedings of the 19th annual 

workshop on Microprogramming MICRO 19, Volume 17 Issue 4 
Publisher: ACM Press 

Full text available: f£) pdf(762 16 KB) Additional Information: full. citation, abstract, references, citin gs, index 

~ """ ~" t erms 

The software pipeline technique is an effective approach to optimizing loops in array 
processor programs, but existing methods are of high complexity and the results may not 
be satisfactory. This paper introduces the URPR algorithm, an extension of the microcode 
loop compaction algorithm URCR. Firstly, unroll the loop(the number of unrolled loop 
bodies relies on the inter-body data dependency); secondly, pipeline the unrolled loop 
bodies one by one; and finally, a new optimized I ... 



13 Draft P rop osed: American National Standard— Gra phical Kernel System I I 

Technical Committee X3H3 - Computer Graphics 
February 1984 ACM SIGGRAPH Computer Graphics, Volume 18 issue si 
Publisher: ACM Press 

Full text available:^ pdf(1 6.07 MB) Additional Information: full citation 
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14 VLSI feign;AQjoyej arc hitecture for pow e r maskab l e arithmetic units I I 

L. Benini, A. Macii, E. Macii, E. Omerbegovic, M. Poncino, F. Pro 

April 2003 Proceedings of the 13th ACM Great Lakes symposium on VLSI GLSVLSI 03 
Publisher: ACM Press 

Full text available: Slpdf( 166 52 KB) Addit ' onal Information: full citation, abstract, references, citings, index 

terms 

Power maskable units have been proposed as a viable solution for preventing side-channel 
attacks to cryptoprocessors. This paper presents a novel architecture for the 
implementation of a class of such kinds of units, namely arithmetic components, which 
find wide usage in cryptographic applications and which are not suitable to traditional 
masking techniques. Results of extensive exploration and architectural trade-off analysis 
show the viability of the proposed solution. 

Keywords: cryptography, low-power design, security 



Linking the behavioral and structural domims of representation in a synthesis system □ 

Robert L. Blackburn, Donald E. Thomas 

June 1985 Proceedings of the 22nd ACM/IEEE conference on Design automation DAC 
85 

Publisher: ACM Press 

Full text available: fl!) pdf(865.37 KB) Addltional Information: full citation, abstract, references, citings, index 

terms 

Hierarchical design representation can be a useful approach to the problem of handling the 
complexity of digital designs. A means of linking together hierarchical behavioral 
representations in a design system is presented. Along with other information, this linking 
correlates the abstract behavior and logical structure together, opening the way for 
multilevel analysis aids that include these levels. Multilevel simulation is briefly discussed. 

Digital RF processor (PRP/spl trade/) for cellular p hon e s 
R. B. Staszewski, K. Muhammad, D. Leipold 

May 2005 Proceedings of the 2005 IEEE/ACM International conference on 
Computer-aided design ICCAD '05 

Publisher: IEEE Computer Society 

Full text available: *g| p_df( 781.16 KB) Additional Information: full citation, abstract 

RF circuits for multi-GHz frequencies have recently migrated to low-cost digital deep- 
submicron CMOS processes. Unfortunately, this process environment, which is optimized 
only for digital logic and SRAM memory, is extremely unfriendly for conventional analog 
and HF designs. We present fundamental techniques recently developed that transform 
the RF and analog circuit design complexity to digital domain for a wireless RF transceiver, 
so that it enjoys the benefits of digital approach, such as pro ... 
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17 User cube: a taxonomy of end users Q 
^ William W. Cotterman, Kuldeep Kumar "™ 
>^ November 1989 Communications of the ACM, volume 32 issue n 
Publisher: ACM Press 

Full text available: l S| pdf(952 69 KB) Add '* iona ' Information: full citation, abstract, references, citings, index 
~ terms, re view 

The user cube, a precise and comprehensive graphical taxonomy designed to provide a 
common base for understanding and classifying end users in organizations, can be used to 
assess the risks associated with end-user computing. 
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Simon Y. Berkovich, Colleen Roe Wilson 

February 1984 ACM Transactions on Computer Systems (TOCS), volume 2 issue i 
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Full text available: g pdf(988.70 KB) Additional Information: full citation, references, citings, index terms 

Keywords: associative proceeding, communication protocol, data compression, 
multiaccess channels 
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Cedric Fournet, Georges Gonthier 

January 1996 Proceedings of the 23rd ACM SIGPLAN-SIGACT symposium on 
Principles of programming languages POPL '96 

Publisher: ACM Press 

Full text available: ^pM13AM3j Additional Information: full cit ation , refere nce s, citings, index terms 



20 Route Recoy^ for Ad Hoc Networ k s E quipped with Switched Single 

Beam A nten nas 

Tarun Joshi, Hrishikesh Gossain, Carlos Cordeiro, Dharma P. Agrawal 

April 2005 Proceedings of the 38th annual Symposium on Simulation ANSS '05 

Publisher: IEEE Computer Society 

Full text available: ■[§ pdf(1 82.99 KB) Additional Information: full citation, abstract, index terms 

In this paper we propose a novel three phase route recovery mechanism for routing over 
switched single beam directional antennas. We enhance the popular Dynamic Source 
Routing (DSR) protocol to the underlying directional layer and include an improved 
broadcast mechanism to facilitate an efficient route discovery. In the event of a link 
failure, our optimized directional routing protocol (DRP) proceeds in three phases to 
recover the route to the destination: (i) antenna beam handoff, (ii) local r ... 
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ACIS Users Guide - Overview 

ACIS has two redundant Back End Processors, responsible for the overall control of the ... 
Each BEP is powered by one side of the PSMC DPA Power Supply. ... 
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vww.rittai.fi/services_support/pdMiedostot/Esitteet/Perma jower_lr_gb.pd^ - Similar pages 

[doc] E AST LANCASHIRE HOSP ITALS NHS TRUST 

File Format: Microsoft Word - View as HTML 
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redundant hardware and software; service delivery liaison for a ... 

www.jobs.nhs.uk/cgi-bin/doc_viewer.cgi?type=hrd&vac_ref=91 1662316 - Similar pages 

Rittal po wer man agem ent: Av ailability , u[3 t _ogsts_dg^ (P ow er ... 
Interruptions to critical business processes, whether due to hardware faults, ... (scalability 
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Review of CHES 2000, August 17-18 . 2000. by Joe Marconig 

Three DPA countermeasures were presented: key masking with localized operations, 



http://www.google.com/search?hl=en&q=dpa+redundant+hardware 6/19/2007 



dpa redundant hardware - Google Search 



Page 2 of 2 



random rotation of key and random insertion of redundant symbols. ... 

wwwJeee-security.org/Cipher/ConfReports/2000/CR2000--CHES2000.html - 20k - 
Cached - Similar pages 

[PDF] Microsoft PowerPoint - FailingGracefully2007.ppt 
File Format; PDF/Adobe Acrobat - Vie w as HTML 

DPA & countermeasures: >1 billion smartcards made annually have DPA Information 

leakage: SPA / DPA / Timing .... extra dedicated/redundant hardware ... 

www.cryptography.com/resources/whitepapers/FailingGracefully2007.pdf - Similar pages 



12345678910 Next 



Free! Get the Google Toolbar. Download Now - About Toolbar 



Google & 



Goj* jg m * H * \ & Bookmarks^ §b u blocked j ^ Checks AutoFill Sen. 



dpa redundant hardware 



Search 



Searshjfflthin^ | Language To o ls | Sea r ch Tips | Dissatisfied? Help us improve 



©2007 Google - GpogleJHome - Advertisi n g Programs - Business S olutio n s - About Google 



http://www.google.com/search?hl=en&q=dpa+redundant+hardware 



6/19/2007 



